注意,使用#符号和$符号的不同:
// This example creates a prepared statement, something like select * from teacher where name = ?; @Select("Select * from teacher where name = #{name}") Teacher selectTeachForGivenName(@Param("name") String name); // This example creates n inlined statement, something like select * from teacher where name = 'someName'; @Select("Select * from teacher where name = '${name}'") Teacher selectTeachForGivenName(@Param("name") String name);
转载请标明出处,转载于:https://blog.youkuaiyun.com/gebitan505/article/details/54929287
本文介绍了在MyBatis中使用#符号与$符号的区别,包括预编译语句的创建方式及其对SQL注入攻击的防护作用。通过具体示例说明了如何根据不同场景选择合适的参数符号。
957

被折叠的 条评论
为什么被折叠?



